2 January 1988 |
|Known for||PyMusique, Alky Project, The Hardware Hacker Manifesto, Onity Lock Hack|
Cody "Daeken" Brocious is an American software engineer best known for his work on PyMusique and his demonstration of a hotel lock vulnerability in 2012 that affected several million locks in the US and was widely reported in the media.
Cody William Brocious was born in Waukegan, Illinois, the son of a Naval Drug and Alcohol counselor. He moved to Chambersburg, Pennsylvania at the age of 3 and became interested in computing by the age of 4. Brocious attended Chambersburg Area Senior High School and the Franklin County Career and Technology Center until the age of 17, at which point he decided to enter the work force by joining MP3Tunes in San Diego.
Brocious first saw recognition as founder of the PyMusique project, where he worked with Jon Lech Johansen of DeCSS fame. PyMusique allowed Linux users to purchase music from the iTunes music store without the standard FairPlay DRM implementation in place.
Upon dropping out of High School, Brocious moved to San Diego, California to work at MP3Tunes under the leadership of Michael Robertson. Cody began work as a contractor on the Oboe project where he implemented a now defunct iTunes plugin for accessing the MP3Tunes Music Locker service. He was hired as a full-time employee of the company on his 18th birthday. During his employment, he continued his work on Oboe, where he worked on various other interfaces to the Music Locker service.
Falling Leaf Systems
During his employment with MP3Tunes, Brocious also joined forces with Brian Thomason, then an employee of another Michael Robertson company, Linspire Inc., to form Falling Leaf Systems LLC. Falling Leaf Systems attempted to commercialize the Alky Project, which was started by Brocious to enable Microsoft Windows games to run on other platforms.
Falling Leaf Systems sold access to a membership site dubbed the Sapling Program, whereby users could access a build of Alky allowing them to demo the game Prey on either Linux or Mac OS X. Despite attempts to expand their stack by also supporting applications on disparate platforms, Falling Leaf Systems officially closed its doors in early 2008.
Brocious, under the pseudonym Daeken, joined with a group of other hackers to reverse engineer the iPhone, granting users the ability to use their phones in ways not intended by Apple. Using code developed by this project, George Hotz gained notoriety by performing the first successful hardware unlocking of a standard iPhone.
The Hardware Hacker Manifesto
The Hardware Hacker Manifesto was published on 21 September 2010. It gives some insight of the psychology of hardware hackers. Cody Brocious goes into an explanation of why it is important for owners to have the right to utilize hardware the way they wish to use it.
Onity lock systems
At the 2012 Black Hat Briefings, Brocious presented several vulnerabilities about the Onity HT lock system, a lock used by the majority of U.S. hotels. The security hole can be exploited using about US$50 worth of hardware, and it potentially affects millions of hotel rooms. The device was eventually optimized down to the size of a marker, and was eventually used to perform burglaries.
Onity has started rolling out safeguards for the problem in late 2012, which was considered a slow reaction. However, in 2013 it was still reported that some hotels continued to have the vulnerability exploited.
- "Holy crap, it's 2013".
- "Accuvant and FishNet Security Complete Transformation; Become Optiv Security".
- forbes.com – Hacker will expose potential security flaw in more than four million hotel room keycard locks, 2012-07-23
- Hotel-room lock hack tied to ongoing thefts – NBC News.com
- Faulty Hotel Locks Demonstrated by ABC News Report – ABC News
- Arik Hesseldahl (28 March 2005). "Forbes interview with Cody Brocious on PyMusique". Forbes.
- DesktopLinux citing Thomason's role at Linspire
- "Falling Leaf Systems announces launch".
- "Alky Project merges with Project VAIO".
- "Falling Leaf Systems closes shop".
- "Recognition of iPhone hackers". Ars Technica.
- Friendly. "Interview with Cody Brocious on the Emokit". h+ Magazine.
- "The Hardware Hacker Manifesto".
- demoseen.com – Inner workings of the Onity HT lock system for hotels, 2012-07-25
- extremetech.com – Black Hat hacker gains access to 4 million hotel rooms with Arduino microcontroller, 2012-07-25
- Electronic lock picking: Hotel heists allegedly exploited Onity keycard lock hack | Computerworld Blogs
- Onity rolling out safeguards against hotel keycard hacks, may fix some locks outright
- Fix for hotels’ electronic door lock hack slow to roll out | Ars Technica
- Hotel Lock Hack Still Being Used In Burglaries, Months After Lock Firm's Fix – Forbes